Skip to content
OpenAdvisories

Archive

April 2013

Vulnerabilities first published in this month (UTC), newest first.

← March 2013 2013 / April May 2013 →
  1. 14
  2. 26
  3. 319
  4. 414
  5. 58
  6. 6 
  7. 72
  8. 87
  9. 931
  10. 1015
  11. 1116
  12. 1210
  13. 132
  14. 14 
  15. 15 
  16. 1614
  17. 17152
  18. 1814
  19. 197
  20. 20 
  21. 213
  22. 2222
  23. 235
  24. 2416
  25. 2528
  26. 2610
  27. 274
  28. 283
  29. 2915
  30. 303
All Critical High Medium Low Exploited only Public exploit

26 results · Clear filters · Feed

  • Unscored —
    CVE-2012-5946 Public exploit EPSS 34%

    Buffer overflow in the c1sizer ActiveX control in C1sizer.ocx in IBM SPSS SamplePower 3.0 before FP1 allows remote atta…

  • Unscored —
    CVE-2013-3301 Public exploit

    The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointe…

    linux Debian
  • Unscored —
    CVE-2013-1428 Public exploit EPSS 61%

    Stack-based buffer overflow in the receive_tcppacket function in net_packet.c in tinc before 1.0.21 and 1.1 before 1.1p…

    tinc Debian
  • High 8.5
    CVE-2013-3239 Public exploit

    phpMyAdmin Remote Code Execution

    phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename of an export file, leading to interpretation of this file a…

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2013-3238 Public exploit EPSS 29%

    phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via …

  • Unscored —
    CVE-2013-3241 Public exploit

    export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the c…

  • Unscored —
    CVE-2013-3240 Public exploit

    Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated …

  • Medium —
    CVE-2013-0233 Public exploit EPSS 14%

    Devise does not properly perform type conversion when performing database queries

    Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incor…

    devise ruby-devise Debian RubyGems
  • Unscored —
    CVE-2013-3075 Public exploit EPSS 11%

    Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilitie…

  • Unscored —
    CVE-2013-1748 Public exploit

    Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2013-2419 Public exploit EPSS 23%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 …

    icu Debian
  • Unscored —
    CVE-2013-2416 Public exploit

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier all…

  • Low 3.7
    CVE-2013-2423 Exploited Public exploit EPSS 85%

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, an…

    KEV May 25, 2022
  • Unscored —
    CVE-2013-1559 Public exploit EPSS 59%

    Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 and 11.1.1.6…

  • Unscored —
    CVE-2013-1509 Public exploit

    Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 7.6.2, 11.1.1.6.0, and 11…

  • Unscored —
    CVE-2013-1937 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might…

  • Unscored —
    CVE-2013-2760 Public exploit

    Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .…

  • High 7.8
    CVE-2013-2596 Exploited Public exploit

    Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

    linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu
    KEV Sep 15, 2022
  • Unscored —
    CVE-2013-3050 Public exploit

    SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2013-0135 Public exploit

    Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2013-0109 Public exploit

    The NVIDIA driver before 307.78, and Release 310 before 311.00, in the NVIDIA Display Driver service on Windows does no…

  • Unscored —
    CVE-2013-0680 Public exploit EPSS 19%

    Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub befo…

  • Unscored —
    CVE-2013-0125 Public exploit

    Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2013-1899 Public exploit EPSS 54%

    Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows r…

  • Unscored —
    CVE-2013-0663 Public exploit

    Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM1…

  • Unscored —
    CVE-2012-1038 Public exploit

    Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba_login.html) in Juniper Networks Mobilit…